dsh-plugin-tailscale-remote
通过你自己的 Tailscale tailnet 从手机打开 DeepSeek Harness 桌面版 Web UI——一键开关，无需端口转发，不公开暴露。
插件会安装到这里；不确定时保持 web。
npx -y @deepseek-ai/dsh plugin --profile web add github:kjx-talesofai/dsh-plugin-tailscale-remote#54c1ddf31706d960bbe63b9d82949856b54bc08bPlugin Tailscale Remote 以 dsh-plugin-tailscale-remote 发布，当前版本为 0.2.5。Plugin Hub 会校验它的 manifest，并保存精确安装来源，便于复现安装结果。
Open your DeepSeek Harness desktop Web UI from your phone over your own Tailscale tailnet. One switch creates a tailnet-only HTTPS mapping, shows a QR code, and the phone is in — no port forwarding, no reverse proxy, no public exposure.
dsh-plugin-tailscale-remote — 一个开关，把桌面端的 DSH 从你自己的手机打开
它是什么：DSH 桌面端插件。打开侧栏里的「Tailscale 远程访问」开关，它就为你在 tailnet 上建一条 HTTPS 映射（https://<你的设备名>.<你的 tailnet>.ts.net/ → 本机 127.0.0.1:<DSH 端口>），面板给出配对二维码；手机扫码、点一下「进入 DSH」，就进去了。之后这台手机直接访问那个域名即可。
为什么做：DSH 的 Web UI 只监听回环地址（127.0.0.1），这是对的——但它意味着手机天然连不上。Tailscale 已经把两台设备放进同一张虚拟网，缺的只是把 GUI 安全地桥过去：不开放公网、不做端口转发、服务端也不用改成监听 0.0.0.0。这个插件就是那座桥，加上一个开关、一个二维码和状态灯。
和 DeepSeek Harness Mobile 的分工：那是社区自研的安卓客户端——想给手机一个原生 App 的人应该用那个，体验是专门为手机做的。这个插件走的是相反的、也故意更窄的路：手机侧不装任何东西（就是一个浏览器标签页），不用注册账号、不经过任何中继，也不引入另一套会话管理；代价是必须有一台开着的、能跑 DSH 的桌面机，且它与手机在同一个 tailnet 里。它不是客户端，只是一座接入现有桌面实例的桥。
怎么装（在 DSH「添加插件」里填，不需要 npm 账号、也无需发布）：
| 填入 | 形式 |
|---|---|
| GitHub | github:kjx-talesofai/dsh-plugin-tailscale-remote#v0.2.5（当前可用） |
| 本地目录 | 绝对路径，例如 /path/to/dsh-plugin-tailscale-remote |
装完重启桌面端（host 半边只在启动时加载）。没有别的步骤：hostname 由插件启动时自己探测并注册进 harness 的信任栅栏。
中英文：侧栏名、面板、帮助文案都跟随 DSH 界面语言（设置 → 通用 → 语言）实时切换，不用重启；配对页按手机浏览器的 Accept-Language 选语言；插件在插件列表里的名字/描述也分中英文。
怎么用：侧栏「Tailscale 远程访问」→ 打开开关 → 手机相机扫二维码 → 在打开的页面点一下「进入 DSH」。此后这台手机直接开 https://<域名>/ 即可（会话 cookie 保留 30 天）。开关关掉 = 撤销那条映射。
Tailscale 组网（三步，别人的 agent 照着做就行）：
tailscale status 能看到两台设备，tailscale ip -4 给出 100.x 地址。插件会在打开开关时预检这三项（含证书是否已签发），缺哪一项都会在面板上用红字说清楚，不会出现"绿灯但连不上"。这也是本插件唯一的前置依赖——它不含、也不能替代组网本身。
注意事项：
127.0.0.1，插件不会改它的绑定；卸载：DSH「插件」列表里卸载 dsh-plugin-tailscale-remote → 重启。想连入口一起清掉，先在面板里关掉开关（它会撤销自己建立的那条 tailscale serve 映射）。
老实说（实测范围）：只在 macOS（Apple Silicon）+ DSH 0.2.0-rc.2 + Tailscale CLI 1.102.4 上端到端跑过（真实手机扫码登录成功）；桌面端升到 0.2.1-rc.2 后重核了依赖面（平台模块版本、cordis / schemastery 版本、客户端 slot 契约），但没有重新拿手机走一遍。Windows / Linux 未测；DSH 升级后上游契约可能变化，见下方 Compatibility。
DSH's Web UI binds to loopback only, which is the right default — and it means your phone cannot reach it, ever. Tailscale already puts your devices on one virtual network, so the missing piece is small and specific: bridge that one loopback port to a tailnet-only HTTPS origin with a real certificate, and make it a switch you can turn off.
That is all this plugin is. It is intentionally narrow:
0.0.0.0. The harness keeps binding loopback; tailscale serve terminates TLS and proxies to it.A community-built Android app, DeepSeek Harness Mobile, exists for people who want a real client on the phone: it is a purpose-built app with its own lifecycle and session handling, and if a native phone experience is what you are after, use that.
This plugin deliberately takes the other trade. Nothing is installed on the phone beyond a browser tab, there is no account, no relay, and no second session store — but it only works while a desktop running DSH is awake and on the same tailnet. It is not a client; it is a thin bridge into the instance you already run.
Use DSH's plugin install dialog (Add plugin) with any of these, then restart the desktop app:
github:kjx-talesofai/dsh-plugin-tailscale-remote#v0.2.5 # GitHub, pinned to this release
/absolute/path/to/dsh-plugin-tailscale-remote # local checkout (dev)
This plugin is not published to the npm registry, and does not need to be — the two spec forms above are all DSH requires.
npm pack(in a checkout) produces a.tgzyou can hand to someone else or point the dialog at withfile:/absolute/path.tgz.
CLI equivalent:
dsh plugin --profile desktop add github:kjx-talesofai/dsh-plugin-tailscale-remote#v0.2.5
Anything machine-specific is discovered at runtime. From a checkout (or from the installed package) the same install is one command — it shells out to the plugin manager, so it stays correct as the profile layout changes:
node ~/.dsh/profiles/desktop/node_modules/dsh-plugin-tailscale-remote/scripts/install.mjs --profile desktop
--spec <spec> installs something other than this package's own release, --revert removes it again, and --dry-run prints the command without running it. The script defaults to installing github:<owner>/<repo>#v<its own version>, derived from its package.json, so it can never install a different tag than the one it shipped in.
Requires DSH Desktop ≥ 0.2.0-rc.1, < 0.3.0 — declared as engines.dsh, which the harness checks before it imports a plugin — and Tailscale on both devices (see below).
For you — or for an agent configuring this on another machine:
tailscale status lists both devices; tailscale ip -4 prints a 100.x address.The plugin's preflight checks exactly these three things (including whether a certificate for your node name has actually been issued) and reports the missing one in plain language. It does not set them up for you — networking stays Tailscale's job.
https://<node>.<tailnet>.ts.net/ directly from then on.Turn the switch off to remove the mapping. On a custom servePort the URL carries the port (https://<node>.<tailnet>.ts.net:8443/); the panel shows it too.
The sidebar label, the panel, and the four-step help text ride the harness's own locale service, so they follow Settings → General → Language and switch in place — no reload, no restart, no separate language setting to keep in sync. The two pages you see before the client loads (pairing, expired code) cannot use that service, so they follow the phone browser's Accept-Language instead; the plugin's own name and description in the plugin list localize through locale/en.json + locale/zh.json.
phone ──HTTPS──▶ Tailscale Serve ──▶ 127.0.0.1:<DSH port> (harness Web UI)
tailnet-only + real cert loopback only, unchanged
▲ ▲
└── pairing page hands the session cookie │ plugin registers the tailnet
to the browser from a same-site page │ authority with the /api trust fence
| Mapping | tailscale serve --bg --https=<servePort> <local port> |
| Fence | the plugin registers its own tailnet authority at runtime (no profile edit needed) |
| Pairing | one-time code (10 min, single use, same-site + rate-limited), because Chromium refuses to store a SameSite=Strict cookie set during an app-initiated redirect |
| Remote settings | a tiny index-tap bootstrap declares an ownsHost transport, so config forms opened on the phone persist on the host instead of in page memory |
| Language | the panel and the sidebar label register a zh/en dictionary with the harness locale service; host failures travel as a language-neutral detailCode, and the pre-client pairing pages read Accept-Language |
| Diagnostics | debug: true in the plugin config registers an opt-in diag route and a marker-gated scan-path echo |
tailscale serve, never tailscale funnel.127.0.0.1; the plugin never rebinds it./api/tailscale-remote.* reuse the harness's own Host/Origin fence plus its session gate; when that gate is unavailable the plugin fails closed (503).tailscale serve is machine-global, so a foreign mapping is left alone).__DSH_BOOT__). It only declares ownership — the session gate and the Host/Origin fence still apply, and a transport the shell already provided is left untouched.client-connection/browser-session in ~/.dsh/.credentials.yaml if you need that.Verified end-to-end on macOS (Apple Silicon) · DSH Desktop 0.2.0-rc.2 · Tailscale 1.102.4, with a real phone on the same tailnet. Against the 0.2.1-rc.2 bundle the same dependencies read: dsh-client-connection, dsh-client-locale, dsh-host-frontend-static at 0.2.1-rc.2, @deepseek-ai/dsh-client-ui-primitives at 0.2.1-rc.2 (served by the web app's module map, not from dsh/node_modules), @deepseek-ai/cordis 4.0.5, @deepseek-ai/schemastery 3.18.5 — all still inside the ranges this package accepts.
The browser half injects slots and locale, declares locale: tailscale-remote on both slot registrations, and registers that namespace's zh/en dictionaries. All three are ships-with-the-web-app services (@deepseek-ai/dsh-client-locale mounts immediately), so no extra install step is involved — but a composition that dropped the locale plugin would drop this plugin's UI with it.
Not tested: Windows, Linux, and DSH versions other than 0.2.0-rc.2 (on 0.2.1-rc.2 everything but the tailnet round-trip was re-checked). The plugin leans on upstream behaviour (the /api trust fence, volatile plugin config, the client slot contract, the locale service, tailscale serve status --json); the test suites below pin what it depends on, so run npm test first after a DSH upgrade.
The
npmbelow is just the CLI bundled with Node — no account, nothing published.
npm install # esbuild + runtime deps
npm run build # src/ → lib/ (the client half is inlined into the harness's lazy-CJS wrapper)
npm test # 4 suites: preflight table · artifact/reference integrity · client render/lifecycle · host routes + fence
The client and host suites take an env override so they can run against an installed copy instead of the working tree — the only way to prove that what a user actually has on disk behaves as tested:
CLIENT_BUNDLE=~/.dsh/profiles/desktop/node_modules/dsh-plugin-tailscale-remote/lib/client.js node tests/client.test.mjs
HOST_BUNDLE=~/.dsh/profiles/desktop/node_modules/dsh-plugin-tailscale-remote/lib/index.js node tests/host.test.mjs
Repo layout — sources vs artifacts:
| Path | What it is | Ships to users |
|---|---|---|
src/index.js | host half (source) | ✗ (lib/ is the build output) |
src/client.jsx | browser half (source) | ✗ |
src/locales.js | the zh/en dictionaries the client registers, and the copy an unseated render falls back to | ✗ |
lib/index.js, lib/client.js | built artifacts, committed so github: installs work without a build step | ✓ |
cordis.patch.yml | bundle layer: inserts this plugin's row | ✓ |
assets/icon.svg | plugin icon shown in DSH's plugin manager | ✓ |
locale/en.json, locale/zh.json | the plugin's own name/description in the plugin list, resolved by dsh-app-boot | ✓ |
scripts/build.mjs | build (esbuild wrapper + contract checks) | ✗ |
scripts/install.mjs | install into a DSH profile — a wrapper over dsh plugin add/remove (--spec, --revert, --dry-run) | ✓ |
tests/artifacts.test.mjs | path/reference drift guard: it is why the next broken bundle/…-style import cannot ship | ✗ |
tests/*.test.mjs | preflight table · artifact integrity · client smoke (real bundle in a stub DOM, both languages) · host smoke (stub cordis + fake tailscale) | ✗ |
dist/ | npm pack output (git-ignored) | ✗ |
Remove the plugin in DSH's plugin list and restart. Before that, turn the switch off in the panel so the tailscale serve mapping is revoked.
MIT © 2026 Jiaxin Kou
Built by Jiaxin Kou · GitHub